Disallow vulnerable Guzzle versions

Disallow Guzzle versions listed in vulnerability [CVE-2022-31090](GHSA-25mq-v84q-4j7r) in same way as in googleapis/google-api-php-client library googleapis/google-api-php-client#2536
vojtasvoboda · Jan 5, 2024 · a9e9b8f · a9e9b8f
1 parent 8cfb95c
commit a9e9b8f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/composer.json b/composer.json
@@ -11,7 +11,7 @@
   "require": {
     "php": "^7.4||^8.0",
     "firebase/php-jwt": "^6.0",
-    "guzzlehttp/guzzle": "^6.2.1|^7.0",
+    "guzzlehttp/guzzle": "^6.5.8||^7.4.5",
     "guzzlehttp/psr7": "^2.4.5",
     "psr/http-message": "^1.1||^2.0",
     "psr/cache": "^1.0||^2.0||^3.0"